$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c1afdd1-abe6-3bf7-acb8-8c5301232fc5.roa File: 3c1afdd1-abe6-3bf7-acb8-8c5301232fc5.roa (raw, json) Hash identifier: WfJ1LM6L8ysWjabsJGAvxAPqkrpw3LkU17D8mR1lM3U= Subject key identifier: C5:5A:C5:3D:CA:4C:02:77:26:DE:CA:F5:61:18:C1:E0:F8:40:45:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B9872375369F4D2D8C8A00940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c1afdd1-abe6-3bf7-acb8-8c5301232fc5.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 396595 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:37:53:69:f4:d2:d8:c8:a0:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=e24136fb-86ca-4b00-8e92-a0c3a9803a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:2f:27:b4:b8:64:5a:48:d0:6e:91:c9:2d: 90:9e:82:e0:8a:e0:6f:15:a7:43:a2:79:8f:63:6a: 9e:17:3d:b6:3c:8a:f4:d4:2a:1d:6c:15:cd:e2:0e: bb:91:e7:ec:fb:5e:99:de:eb:ce:3a:79:32:a7:3a: 7e:bc:03:9c:e0:ee:e8:9b:60:38:d8:64:2a:ff:42: 86:33:df:a6:7e:68:74:5d:5b:02:40:f3:4c:37:5d: 3b:de:91:24:b6:da:af:71:d7:5d:4a:d0:ac:78:ce: 45:99:fe:57:7d:81:d4:d0:e8:f9:a9:ce:e2:39:23: 8f:bf:6e:6f:0c:59:82:cb:b5:5c:2f:13:cf:77:97: e7:11:76:71:b6:c0:47:bf:6a:d1:c3:0c:13:a9:e4: 2b:62:36:b5:aa:58:7c:73:38:d2:27:f6:7b:66:38: bc:09:6d:54:6a:fe:d8:54:7e:2d:2f:c5:d9:4a:e0: 21:ad:36:fb:ff:dd:27:15:35:8a:3d:6d:b4:7b:eb: c8:25:88:a0:99:42:d2:42:56:ef:5a:e2:16:e8:41: 4c:49:e3:e0:63:be:be:fc:12:a3:fd:5f:68:7b:17: c5:a2:2c:8f:b6:6b:a2:7a:7c:0d:e4:c0:6a:08:40: 70:77:1a:ae:f8:c9:3d:2d:86:b6:cf:eb:d6:4c:5c: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5A:C5:3D:CA:4C:02:77:26:DE:CA:F5:61:18:C1:E0:F8:40:45:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c1afdd1-abe6-3bf7-acb8-8c5301232fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:77:59:20:8c:88:be:02:09:1b:f0:66:cd:7d:1b:76:ed:2b: 75:dd:da:03:1b:be:81:b1:77:33:8f:5a:a2:47:c6:25:49:de: 53:d0:b3:89:c0:a7:38:c8:69:43:a6:41:0e:85:3f:12:6b:15: 0c:5e:c5:0b:ad:5a:db:1f:26:ae:24:64:32:0c:b4:ef:c8:b1: d9:a7:c0:e3:14:c7:70:96:5d:43:d2:bf:5d:34:b3:c8:c1:b3: 66:92:cb:8d:a4:fa:de:08:b6:83:53:d0:0b:77:6b:89:b4:83: 0c:05:93:f9:d2:78:24:f9:8f:f6:60:8b:fa:4c:84:fd:65:01: 35:d1:15:ba:26:53:56:6c:8e:77:24:38:20:6d:9b:b1:23:0d: 67:4a:68:74:54:e8:5e:d0:ed:d6:bb:6a:75:4b:d0:b7:a4:8b: 61:f1:61:72:2c:37:d6:d1:c1:d3:1e:72:b8:06:a5:84:34:ec: b3:85:87:ce:11:37:5f:af:7b:fd:d9:30:2d:82:ce:a2:cb:2d: 1f:d5:71:64:a3:b2:c7:88:1a:9f:59:5f:0f:9c:8a:90:d4:20: 8a:ea:7a:99:17:7e:5e:eb:a3:1b:f5:73:c3:98:ba:f3:6d:29: 86:e6:e0:4c:d5:49:e7:07:2f:b3:54:2e:2d:b2:a3:d4:5c:6a: 46:77:65:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuYcjdTafTS2MigCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk ZTI0MTM2ZmItODZjYS00YjAwLThlOTItYTBjM2E5ODAzYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK8vJ7S4ZFpI0G6RyS2QnoLgiuBvFadDonmP Y2qeFz22PIr01CodbBXN4g67kefs+16Z3uvOOnkypzp+vAOc4O7om2A42GQq/0KG M9+mfmh0XVsCQPNMN1073pEkttqvcdddStCseM5Fmf5XfYHU0Oj5qc7iOSOPv25v DFmCy7VcLxPPd5fnEXZxtsBHv2rRwwwTqeQrYja1qlh8czjSJ/Z7Zji8CW1Uav7Y VH4tL8XZSuAhrTb7/90nFTWKPW20e+vIJYigmULSQlbvWuIW6EFMSePgY76+/BKj /V9oexfFoiyPtmuienwN5MBqCEBwdxqu+Mk9LYa2z+vWTFwoJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMVaxT3KTAJ3Jt7K9WEYweD4QEXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2MxYWZkZDEtYWJlNi0z YmY3LWFjYjgtOGM1MzAxMjMyZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD53WSCMiL4CCRvwZs19G3btK3Xd2gMbvoGxdzOPWqJHxiVJ3lPQ s4nApzjIaUOmQQ6FPxJrFQxexQutWtsfJq4kZDIMtO/IsdmnwOMUx3CWXUPSv100 s8jBs2aSy42k+t4ItoNT0At3a4m0gwwFk/nSeCT5j/Zgi/pMhP1lATXRFbomU1Zs jnckOCBtm7EjDWdKaHRU6F7Q7da7anVL0Leki2HxYXIsN9bRwdMecrgGpYQ07LOF h84RN1+ve/3ZMC2CzqLLLR/VcWSjsseIGp9ZXw+cipDUIIrqepkXfl7roxv1c8OY uvNtKYbm4EzVSecHL7NULi2yo9RcakZ3Ze0= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:27 2025 by rpki-client